MalwareManufacturingManufacturingRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

ASARCO LLC

bd_16581bbcb4448d99 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2021

Filed

Jul 16, 2021

To disclose

20 weeks

Affected

4state residents only

Linked

7 filings

Confidence

66%

Full breach record for ASARCO LLC →

Asarco LLC experienced a ransomware attack on March 1, 2021, where a malicious third party encrypted servers in the US and Mexico. On May 3, 2021, it was discovered that some data had been made public without authorization. Approximately 4 New Hampshire residents were affected. Compromised data included names, financial account information, SSNs, driver's license numbers, health insurance policy numbers, dates of birth, and medical information. Asarco disconnected servers, isolated the data center, and engaged a cybersecurity firm. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Mar 1, 2021

Begins

Mar 1, 2021

Discovered

Jul 16, 2021

Filed

vs. sector median

+9 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_141271ebdf6d56532021-07-16Verified
Montana State AGbd_49cfe1f19d35c4542021-07-16Verified
Massachusetts State AGbd_adc3afb1fcab8e332021-07-16Verified
Indiana State AGbd_d6cc1dff8d7fe90c2021-07-16Verified

Show 2 more filings ↓up to 169d gap

Washington State AGbd_cf61ab0eed5238b52021-06-02 · +44dCandidate
Illinois State AGbd_565d7d5115d918122022-01-01 · +169dVerified

Name: ASARCO LLC
norm: asarco

Name: ASARCO LLC
norm: asarco
Industry: Manufacturingllm

Discovered: Mar 1, 2021
Breach occurred: Mar 1, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 16, 2021
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Data elements: Medical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Disconnected its servers
Deactivated the access point used to deploy the malicious program
Isolated the Data Center
Working with a leading cybersecurity firm that is analyzing the malware used in the attack
Monitoring the dark web to identify any additional data that might have been compromised
Making enhancements to internal security systems
Implementing additional procedures to mitigate future risk
Arranged to have NortonLifeLock to protect your identity and monitor your credit for 12 months at no cost
Changes made: Making enhancements to internal security systems
Implementing additional procedures to mitigate future risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGJun 2 · first

Maine State AG+44d

Montana State AG+44d

Massachusetts State AG+44d

Indiana State AG+44d

New Hampshire State AG+44d · this page

Illinois State AG+213d

Pattern: first filing Jun 2 (WA), last Jan 1 (IL) — a 213-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/asarco-20210716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2021
Raw hash: 5618d71dbb8066d2e94a023beb898d56bde2d1971b2329b8070f54b9d08bd17e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityASARCO LLC

Victim entityASARCO LLC

Incidentdiscovered Mar 1, 2021

Stated responseDisconnected its servers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov